Lucene search
+L

10895 matches found

OSV
OSV
added 2024/01/08 3:15 p.m.8 views

UBUNTU-CVE-2023-39273

Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

7.8CVSS6.1AI score0.00414EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/08 3:15 p.m.11 views

UBUNTU-CVE-2023-39271

Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

7.8CVSS6.1AI score0.00414EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/08 3:15 p.m.8 views

UBUNTU-CVE-2023-37282

An out-of-bounds write vulnerability exists in the VZT LZMARead dmem extraction functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

7.8CVSS7.5AI score0.00436EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/01/08 12:00 a.m.10 views

GTKWave 资源管理错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave suffers from a memory misreference vulnerability that can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.7AI score0.00403EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:00 a.m.13 views

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A buffer overflow vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via specially crafted .fst files...

7.8CVSS8AI score0.00435EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:00 a.m.15 views

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave version 3.3.118 suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to potentially cause arbitrary code execution via a specially crafted fst file...

7.8CVSS8.1AI score0.00382EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:00 a.m.11 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave suffers from an integer overflow vulnerability that can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.9AI score0.00372EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:00 a.m.13 views

GTKWave 安全漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A buffer overflow vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via specially crafted .fst files...

7.8CVSS8AI score0.00435EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:00 a.m.15 views

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An out-of-bounds write vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via a specially crafted .lxt2 file...

7.8CVSS7.9AI score0.00432EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:00 a.m.12 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A code execution vulnerability exists in gtkwave Files version 3.3.118, which can be exploited by an attacker to potentially cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.7AI score0.00414EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:00 a.m.10 views

GTKWave 安全漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A buffer overflow vulnerability exists in GTKWave version 3.3.115, which stems from a boundary error in the LXT2 lxt2rdexpandintegertobits function when handling untrusted input, and can be exploited by an attacker to cause...

7.8CVSS8AI score0.00435EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:00 a.m.11 views

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A buffer overflow vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via specially crafted .fst files...

7.8CVSS8AI score0.00435EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:00 a.m.11 views

GTKWave 资源管理错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave suffers from a memory misreference vulnerability that can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.7AI score0.00406EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/08 12:00 a.m.11 views

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A code execution vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via a specially crafted .lxt2 file...

7.8CVSS7.7AI score0.00432EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/01/08 12:00 a.m.5 views

PT-2024-2952 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: An integer overflow vulnerability exists in the VZT longest len value allocation functionality. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious...

7.8CVSS8.3AI score0.01493EPSS
SaveExploits82References136
Patchstack
Patchstack
added 2024/01/08 12:00 a.m.7 views

WordPress TNC PDF viewer Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)

Software TNC PDF viewer Type Plugin Vulnerable versions = 2.8.0 Fixed in 2.9.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID c450f13b2e6b Credits WordFence Required privilege...

6AI score
SaveExploits0References2Affected Software1
Talos
Talos
added 2024/01/08 12:00 a.m.31 views

GTKWave VZT LZMA_read_varint out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2023-1811 GTKWave VZT LZMAreadvarint out-of-bounds write vulnerability January 8, 2024 CVE Number CVE-2023-36861 SUMMARY An out-of-bounds write vulnerability exists in the VZT LZMAreadvarint functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead ...

7.8CVSS7.3AI score0.00436EPSS
SaveExploits1
NVD
NVD
added 2024/01/05 5:15 a.m.29 views

CVE-2023-51277

nbviewer-app aka Jupyter Notebook Viewer before 0.1.6 has the get-task-allow entitlement for release builds...

9.8CVSS9.5AI score0.01056EPSS
SaveExploits1References4
Prion
Prion
added 2024/01/05 5:15 a.m.31 views

Design/Logic Flaw

nbviewer-app aka Jupyter Notebook Viewer before 0.1.6 has the get-task-allow entitlement for release builds...

7.5CVSS7.2AI score0.01056EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/05 12:00 a.m.7 views

CVE-2023-51277

nbviewer-app aka Jupyter Notebook Viewer before 0.1.6 has the get-task-allow entitlement for release builds...

9.6AI score0.01056EPSS
SaveExploits1References4
Rows per page
Query Builder